Overview

Experiencing receiving a large number of false positives can be caused by the Email Exploit Engine. By design, Email Exploit Engine doesn't have a whitelist option, users need to disable that filter if too many false positives are found. This article aims to guide you on the proper approach when you encounter such issues.

Environment

• GFI MailEssentials - all versions
• OS - all versions (supported)

Reference Information

Please note that Email Exploit Engine alike other Content Filtering filter does not contain an exception list or whitelist. Emails are flagged depending on the nature and structure of their content. 

In some environments that might cause false positives, we suggest disabling the option triggering those. Such change should not pose any vulnerability to the system, assuming other Content Filtering and Email Security engines are used. 

Whitelist has been requested in the past and is to be considered by Project Management.

You can add your votes from the feature request. Once released, this feature will be mentioned in the release notes.